A vulnerability in git-annex allowed the checksum of annexed files to be exposed to encrypted special remotes during resumed uploads. Encrypted special remotes are not supposed to access the checksum of the unencrypted file, making this a privacy concern. The issue is considered low severity and was fixed in git-annex version 10.20260717.